Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2e47ff804b49726fe96ffdfddc6ae470N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e47ff804b49726fe96ffdfddc6ae470N.dll
Resource
win10v2004-20240709-en
Target
2e47ff804b49726fe96ffdfddc6ae470N.exe
Size
1.5MB
MD5
2e47ff804b49726fe96ffdfddc6ae470
SHA1
043cc252cb32da53ee52d27e573863aa9974c2bd
SHA256
b538955059c4b9771e91ec3df615e65daf0128123c1b774625b414a391ed0a74
SHA512
603ab62679028155ef1c846b7a037d44cce4430cfa811d35b98c74c778e42f062bad180c38907814a17aae023e0a533df7916937b49e3fae50ba991e841c863b
SSDEEP
24576:7w+dChY2cl3Z+SiqkID5pFn01cwlr19syL6dYCl4nnfwAqfghGzDhlJVzLmh4GvG:7w+dChY2cl3Z+SiqkID5pFn01cwd191S
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\BuildAgent\work\d188d2b64e530952\Out\Release\Win64\AudioGraphSettings\AGSWRC2\AGSWRC2.pdb
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
??0COMException@Platform@@QE$AAA@H@Z
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
??BIntPtr@Platform@@SAPEAXV01@@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?Free@Heap@Details@Platform@@SAXPEAX@Z
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
??0IntPtr@Platform@@QEAA@PEAX@Z
?__abi_translateCurrentException@@YAJ_N@Z
??0NotImplementedException@Platform@@QE$AAA@XZ
?CreateException@Exception@Platform@@SAPE$AAV12@H@Z
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?InitializeData@Details@Platform@@YAJH@Z
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?UninitializeData@Details@Platform@@YAXH@Z
?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z
??0Object@Platform@@QE$AAA@XZ
BSTR_UserMarshal
LPSAFEARRAY_UserUnmarshal64
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserMarshal
BSTR_UserFree64
BSTR_UserSize64
LPSAFEARRAY_UserSize64
BSTR_UserMarshal64
SysFreeString
SysAllocString
LPSAFEARRAY_UserFree64
BSTR_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
BSTR_UserUnmarshal64
SafeArrayPutElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayCreate
BSTR_UserSize
RpcStringBindingComposeW
NdrClientCall3
NdrServerCallAll
NdrServerCall2
RpcBindingFromStringBindingW
RpcStringFreeW
InitializeCriticalSectionEx
DeleteCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
DecodePointer
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsCreateString
WindowsDuplicateString
CoTaskMemFree
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
_Cnd_wait
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?GetNextAsyncId@platform@details@Concurrency@@YAIXZ
_Cnd_broadcast
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
_Cnd_init_in_situ
_Mtx_init_in_situ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
_Cnd_destroy_in_situ
_Mtx_destroy_in_situ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_Xbad_function_call@std@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
EnterCriticalSection
LeaveCriticalSection
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
__std_type_info_destroy_list
_CxxThrowException
memset
_purecall
__std_exception_destroy
__std_exception_copy
memmove
__std_terminate
__CxxFrameHandler3
__C_specific_handler
memcpy
_initterm
_cexit
_initterm_e
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_crt_atexit
_errno
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
malloc
_callnewh
free
wcslen
DllCanUnloadNow
DllGetActivationFactory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ